» del_dm_ll_nsa44f1.dll
Overview
Analysis
File Details
Programs (1)

del_dm_ll_nsa44f1.dll

AZTEC MEDIA INC.

The module del_dm_ll_nsa44f1.dll by AZTEC MEDIA INC has been detected as adware by 12 anti-malware scanners. This file is typically installed with the program Settings Manager by Aztec Media Inc. which is a potentially unwanted software program.

File name:

Publisher:

AZTEC MEDIA INC. (signed and verified)

MD5:

80416b4772890b726fade32d6527564d

SHA-1:

36c0a26ec1fa576abe9fd055f41a8d062ebb5081

SHA-256:

7fd337633dd43a573037aa8d41b898c340994f23dd62b238f590d1a6349b90eb

Scanner detections:

12 / 68

Status:

Adware

Analysis date:

4/25/2024 10:00:33 AM UTC (today)

Scan engine

Detection

Engine version

AVG

SearchSuite.G

2015.0.3279

Baidu Antivirus

Adware.Win32.SearchSuite

4.0.3.141126

ESET NOD32

Win32/Toolbar.SearchSuite (variant)

8.10777

F-Prot

W32/SearchSuite.A.gen

v6.4.7.1.166

G Data

Win32.Application.AztecSystemK

14.11.24

K7 AntiVirus

Unwanted-Program

13.185.14120

Kaspersky

not-a-virus:WebToolbar.Win64.SearchSuite

14.0.0.2888

McAfee

SearchSuite

5600.6935

NANO AntiVirus

Riskware.Win32.SearchSuite.dhhtnl

0.28.6.63726

Reason Heuristics

PUP.AZTECMEDIAINC.R

14.11.26.9

Sophos

SearchSuite

4.98

Zillya! Antivirus

Adware.SearchSuite.Win64.609

2.0.0.1992

File size:

481.5 KB (493,072 bytes)

File type:

Dynamic link library (Win32 DLL)

Common path:

C:\Program Files\settings manager\smdmf\del_dm_ll_nsa44f1.dll

Digital Signature

Signed by:

AZTEC MEDIA INC.

Authority:

Thawte, Inc.

Valid from:

1/28/2014 6:00:00 PM

Valid to:

5/19/2015 6:59:59 PM

Subject:

CN=AZTEC MEDIA INC., OU=Development, O=AZTEC MEDIA INC., L=Panama City, S=Panama, C=PA

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

7DE0D719BBAF922D3A980DBD523B959A

File PE Metadata

Compilation timestamp:

11/23/2014 6:40:30 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

12288:K6v8NYtPx4FOcR07TZKo5Oe9ag9RhSho2/h+2OhS2H2Y2NhBhghH252rh12k2r2g:mNYlcR0xKoJ9ag9cD

Entry address:

0x2BDCF

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 52, 7F, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 83, EC, 20, 8B, 45, 08, 56, 57, 6A, 08, 59, BE, 84, B7, 05, 10, 8D, 7D, E0, F3, A5, 89, 45, F8, 8B, 45, 0C, 5F, 89, 45, FC, 5E, 85, C0, 74, 0C, F6, 00, 08, 74, 07, C7, 45, F4, 00, 40, 99, 01, 8D, 45, F4, 50, FF, 75, F0, FF, 75, E4, FF, 75, E0, FF, 15, 04, B1, 05, 10, C9, C2, 08, 00, CC, CC, 8B, 4C, 24, 04, F7, C1, 03, 00, 00, 00, 74, 24, 8A, 01, 83... 
[+]

Entropy:

6.5608

Code size:

359.5 KB (368,128 bytes)

The file del_dm_ll_nsa44f1.dll has been discovered within the following programs.

Settings Manager by Aztec Media Inc.

This is an adware web browser add-on that injects advertising in the user's browser as well as hijacks various browser settings such as the home page, search provider and new tab page.

86% remove it

Remove del_dm_ll_nsa44f1.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.